: Known Issues in the Panorama Plugin for Azure 4.2.0
Focus
Focus

Known Issues in the Panorama Plugin for Azure 4.2.0

Table of Contents

Known Issues in the Panorama Plugin for Azure 4.2.0

The following list describes known issues in the Panorama plugin for Azure 4.2.0.

PLUG-11954

When you update the number firewalls in the Azure Virtual Machine Scale Set (VMSS) and attempting to redeploy, the deployment status becomes stuck in the Deploying state and some firewalls are displayed as disconnected. Additionally, the new number of firewalls is not reflected in the summary. After 30 or more minutes, the firewalls display as Connected and the correct number of firewalls is displayed.

PLUG-11917

VM-Series firewalls are not cleaned up from the device summary, templates, and device groups on the secondary passive Panorama node after undeploy of an upgraded and redeployed Panorama plugin for Azure 4.1.0 orchestration.

PLUG-11909

After performing an undeploy of a successful orchestration with the Panorama plugin for Azure 4.1.0, when attempting to commit a new configuration, you might see device group, template, or template stack settings from the previous deployment in the commit list.

PLUG-11905

On a Panorama HA pair, you might see tracebacks on the new primary firewall in the monitoring logs after a failover event. Additionally, monitoring fails while the tracebacks occur.
Workaround: Perform a commit on the primary active node to recover monitoring.

PLUG-11732

The command debug plugins azure azure-tags dump-all monitoring-definition does not work in the tags contain ASCII characters.

PLUG-11011

When a proxy configuration is deleted and committed on Panorama, you might observe logs reaching the proxy intermittently.

PLUG-10091

After a successful VM-Series firewall deployment, the Panorama plugin for Azure displays the status Warning and the message Deployment succeeded but FWs have yet to connect with Panorama after 20 min if the configured PA-VM version is PAN-OS 10.1.x and later.
Workaround: Use CommitPush to Devices to synchronize the templates.
You can upgrade to PAN-OS 10.2.2 or later to avoid this issue.